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in an operating environment in each of the nodes, providing service facilities useful to the 
mobile program, and 

in the operating environment, in each of the nodes, running a supervisor process that 
allows the mobile program indirect access to make use of the service facilities. 

2. (previously amended) The method of claim 1 further comprising creating a bastion 
object in an unrestricted environment to protect the unrestricted environment and passing it into a 
restricted environment within which the mobile program is running. 

3. (twice amended) The method of claim 2 in which the bastion object provides an 
interface for the mobile program to access the service facilities in a safe manner and which is 
substantially the same interface as the interface that the service facilities provide in the 
unrestricted environment. 

4. (previously amended) The method of claim 2 in which the bastion object performs 
type checking on all method calls made by a mobile program to a service facility. 

5. (allowable) A method for use in a distributed system for processing a mobile program 
that executes in one node of the distributed system, may be interrupted at almost any point in its 
execution, and may be moved to another node of the distributed system for further execution, 
comprising 

in the one node, capturing a current state of the mobile program execution, 

delivering the captured state end program code of the mobile program to the other node, 

and 

continuing execution at the other node from the point of interruption based on the 
captured state and the program code. 

6. (allowable) The method cf cl aim 5 further comprising 

also delivering with the captured state and the program code a transported file system or 
other information created during execution of th$ mobile program. 
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7. (allowable) The method of claim 6 in which the information in the transported file 
system or other information is accessible without executing the mobile program. 

8. (allowable) The method of claim 5 in which the step of capturing comprises using an 
encoding scheme of a language interpreter. 

9. (twice amended) A method for enabling communication with a mobile program 
running in a distributed system, a mobile program service station, an extension, or another 
application, comprising 

providing a mechanism which permits each of mobile program, the mobile program 
service station, the extension, and the other application to identify services that it provides, and 
permits each of them to find services that it needs, and 

enabling the mobile program to communicate with mobile program service stations via 
objects associated with the mechanism. 

10. (twice amended) The method of claim 9 in which each of the objects is provided by 
a supervisor process running in the distributed system and prevents uncontrolled access to a 
needed service. 

1 1. (amended) The method of claim 9 in which the mechanism includes a broker and a 
manager. 

12. (amended) The method of claim 9 in which the objects are data typed. 

13. (previously amended) A method for enabling negotiation between two unrelated 
mobile programs, mobile service stations, extensions, or other applications, in a distributed 
system, comprising 

in an operating environment in a node of the distributed system, receiving information 
from one of the two mobile programs, mobile program service stations, extensions, or other 
applications, concerning a transaction offered to other mobile programs, mobile program service 
stations, extensions, or other applications, 
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in the operating environment in the node, receiving information from the second of the 
two mobile programs, mobile programs service stations, extensions, or other applications 
concerning a transaction in which the second of the mobile programs, mobile program service 
stations, extensions, and other applications wishes to engage, 

notifying the second mobile program, mobile program service station, extension, or other 
application of the one mobile program, mobile program service station, extension, or other 
application, and 

enabling the two mobile programs, mobile program service stations, extensions, or other 
applications to communicate concerning the transaction. 

14. (previously amended) The method of claim 13 in which the information is received 
from two mobile programs by a third mobile program. 

15. (allowable) A method for enabling action by an operating environment in a 
distributed system with respect to a mobile program which is programmed in a language that is 
not fully supported by the operating environment, comprising 

labeling a mobile program to identify operating environment features required for full 
support of the mobile program, 

in an operating environment, examining the labeling of the mobile program to determine 
whether the operating environment supports all of the identified features, and 

taking an action based on whether all the identified features are supported. 

16. (allowable) The method of claim 15 wherein the action comprises sending the 
mobile program to another operating envirorjnent for processing. 

17. (allowable) The method of claim 15 in which the action comprises retrieving non- 
program specific data from the mobile program. 
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18. (unchanged) A method for aiding communication with a mobile program executing 
in operating environments provided at nodes of a distributed system, comprising 

maintaining a name space that uniquely identifies types of information to be interchanged 
as part of the communication, and 

using a name within the name space to identify a type of information to be interchanged. 

19. (unchanged) The method of c!.aim 18 in which the mobile program registers an 
interface which includes the name of a type of information that is to be interchanged. 

24. (previously amended) A msthod for controlling interaction between a mobile 
program and an application running in an operating environment provided at a node of a 
distributed system, comprising 

defining a trusted portion of the operating environment which provides trusted services to 
the mobile program, 

requiring portions of the application running in the operating environment to be 
registered as trusted, and 

permitting indirect interaction via the operating environment between the mobile program 
and the application running in the operating environment only if the portions of the application 
required to be registered have been registered, 
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25. (previously amended) A method for enabling a mobile program to carry out defined 
functions including otherwise unsafe functions, through the use of extensions comprising 

coding safe extensions to an operating environment and to an interpretive language under 
which the mobile program runs, and 

permitting the mobile program to carry out the defined functions by making use of the 
extensions. 

Add the following new claim: 

--26. (new) The method of claim 9 in which the mechanism comprises a connector 
mechanism, and the objects comprise connector objects.-- 



